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TN THE CLAIMS 
Amended claims follow: 

1 (Currently Amended) A method for scanning data read from storage, 
comprising: 

a) receiving a request for data saved in storage from a central processing unit; 

b) scanning the requested Ham fnr malicious code: and 

c) transmitting the data from the storage to the central processing unit if 
malicious code is not found in the data during the scannings 
wherein the scanning is performed by a scanning module coupled to_a 
storage subsystem controllers 

wherein a user is allowed to disable the scanni ng module, and data is 
precluded from being transmitted from the storage to the central processi ng 
unit urton the disabling of the scanning module . 

2. (Original) The method as recited in claim 1 , wherein the storage is selected 
from the group consisting of a hard drive, compact disc-read only memory 
(CD-ROM), and a floppy disk. 

3. (Cancelled) 

4. (Currently Amended) The method as recited in claim wherein the storage 
subsystem controller is coupled to a storage driver which is coupled to the 
central processing uni t, where the storage driver is cou pled between the 
storage subsystem controller and the central p rocessing unit, so that the 
storage subsystem controller and the central processing u nit must 
communicate therethrough 

5. (Currently Amended) The method as recited in claim 31, wherein the storage 
subsystem controller is coupled to the storage. 
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S. (Currently Amended) The method as recited in claim 31., wherein the 
scanning module includes software. 

7. (Currently Amended) The method as recited in claim 31, wherein the 
scanning module includes hardware. 

8. (Cancelled) 

9. (Cancelled) 

10. (Original) The method as recited in claim 1 , and further comprising 
executing an event based on results of the scanning. 

1 1 . (Original) The method as recited in claim 10, wherein the event includes an 
alert. 

12. (Original) The method as recited in claim 1 0, and further comprising 
disabling the scanning module in response to the event. 

13. (Original) The method as recited in claim 12, wherein data is precluded from 
being transmitted from the storage to the central processing unit upon the 
disabling of the scanning module. 

14. (Original) The method as recited in claim 1 , wherein the scanning includes 
content scanning. 

15. (Original) The method as recited in claim 1 > wherein the scanning includes 
virus scanning. 

1 6. (Original) The method as recited in claim 1 , wherein the storage is accessible 
via a network. 
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17. (Currently Amended) A computer program product for scanning data read 
from storage, comprising: 

a) computer code for receiving a request for data saved in storage from a central 

processing unit; 

b) computer code for scanning the requested data for malicious code; and 

c) computer code for transmitting the data from the storage to the central 
processing unit if malicious code is not found in the data during the 
scanning; 

wherein the sca nnin g is performed by a scanning module coupled to a 
storage subsystem controller; 

wherein a user is allowed to disable th e scanning module, and data is 
precluded from being transmitted from the storag e to the central processing 
unit u pon the disabling of the scan ning module. 

1 8. (Original) The computer program product as recited in claim 17, wherein the 
storage is selected from the group consisting of a hard drive, compact disc- 
read only memory (CD-ROM), and a floppy disk. 

19. (Cancelled) 

20. (Currently Amended) The computer program product as recited in claim 197, 
wherein the storage subsystem controller is coupled to a storage driver which 
is coupled to the central processing unit where the storage driver is coupled 
between the storage subsystem controller and the centr al processing unit so 
that the storage subsystem controller and the c entral processing unit must 
communicate therethrough . 

21 . (Currently Amended) The computer program product as recited in claim 197, 
wherein the storage subsystem controller is coupled to the storage. 
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22. (Currently Amended) The computer program product as recited in claim 197, 
wherein the scanning module includes software. 

23. (Currently Amended) The computer program product as recited in claim 197, 
wherein the scanning module includes hardware. 

24. (Cancelled) 

25. (Cancelled) 

26. (Original) The computer program product as recited in claim 19, and further 
comprising computer code for executing an event based on results of the 



scanning. 



27. 



(Original) The computer program product as recited in claim 26, wherein the 
event includes an alert. 



28. 



(Original) The computer program product as recited in claim 26, and further 
comprising computer code for disabling the scarining module in response to 



the event. 



29. 



(Original) The computer program product as recited in claim 28, wherein 
data is precluded from being transmitted from the storage to the central 
processing unit upon the disabling of the scanning module. 



30. 



(Original) The computer program product as recited in claim 17, wherein the 
scanning includes content scanning. 



3 1 • (Original) The computer program product as recited in claim 1 7, wherein the 
scanning includes virus scanning. 
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32. (Original) The computer program product as recited in claim 1 7, wherein the 
storage is accessible via a network. 

33. (Currently Amended) A method for scanning data written to storage, 
comprising: 

a) receiving a request for data to be written in storage, the request being 
received from a central processing unit; 

b) scanning the data for malicious code: and 

c) writing the data to the storage if malicious code is not found in the data 
during the scanning; 

wherein the scanning is performed bv a scanning modu le coupled to a 
storage subsystem controller; 

wherein a user is allowed to disable the scannin g module, and data is 
precluded from being transmitted to the storage from the c entral processing 
unit upon the disabling of the scanning module . 

34. (Currently Amended) A computer program product for scanning data written 
to storage, comprising: 

a) computer code for receiving a request for data to be written in storage, the 
request being received from a central processing unit; 

b) computer code for scanning the data for malicious code; and 

c) computer code for writing the data to the storage if malicious code is not 
found in the data during the scanning; 

wherein the scanning is performed bv a scanning module coup led to a 
storage subsystem controller; 

wherein a user is allowed to disable the scanning mo dule, and data is 
precluded from being transmitted to the storage from the central processing 
unit upon the disabling of the scanning module . 

35. (Currently Amended) A system for scanning data read from storage, 
comprising: 
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a) storage for saving data therein; 

b) a storage subsystem controller coupled to the storage for controlling access 
to the data saved therein; 

c) a central processing unit coupled to the storage subsystem controller for 
issuing read requests for reading the data saved therein for processing 
purposes, and write requests for writing data to the storage; 

d) a scanning module coupled to the central processing unit and the storage 
subsystem controller, the scanning module adapted for identifying the 
requests from the central processing unit, and scanning the data for malicious 
code in response to the requests; and 

e) an event manager module coupled to the scanning module and the central 
processing unit, the event manager module adapted for receiving results of 
the scanning from the scanning module, the event manager module adapted 
to execute an event based on the results of the scanning; 

f) wherein the central processing units is conditionally allowed to read the data 
saved in the storage and write data to the storage based on the results of the 
scanning; 

g ) wherein a user is allowed to disable the scanni ng module, and data is 
precluded from being transmitted between the st orage and the central 
processing unit uoon the disabling of the s canning module. 

36. (Original) The system as recited in claim 35, wherein the scanning module is 
coupled to the storage subsystem controller via a bus. 

37. (Original) The system as recited in claim 35, wherein the scanning module is 
directly coupled to the storage subsystem controller. 

38. (Currently Amended) The system as recited in claim 35, wherein the 
scanning module is coupled to the storage subsystem controller via a storage 
driver, where the storage driver is coupled between th e storage subsystem 
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rnntrn11er and the central nrocess inp unit, so that the storage subsystem 
mntmller and the central processi n g unit must communicate therethrough . 

39. (Currently Amended) A system for scanning data read from storage, 
comprising; 

a) means for saving data therein; 

b) means for controlling access to the data saved therein; 

c) means for issuing read requests for reading the data saved therein for 
processing purposes and write requests for writing data to the storage; 

d) means for identifying the requests from the central processing unit, and 
scanning the data for malicious code in response to the requests; and 

e) means for receiving results of the scanning from the scanning module, the 
event manager module adapted to execute an event based on the results of 
the scanning; 

f) wherein the central processing units is conditionally allowed to read the data 
saved in the storage and write data to the storage based on the results of the 
scanning! 

g) wherein a user is allowed to disable the scanning modul e, and data is 
precluded from being transmitted between th e storage and the central 
processing unit upon the disabling of the scanning module. 



40. (New) The method as recited in claim 1, wherein the user includes a remote 
administrator. 

41 . (New) The method as recited in claim 1, wherein the user is allowed to 
disable the storage, and the data is precluded from being transmitted to the 
storage from the central processing unit upon the disabling of the storage. 

42. (New) The method as recited in claim 41, wherein it is determined whether 
the storage is disabled only after detenmning whether the scanning module is 
disabled. 



PACE 11/17 * RCVD AT 1/28/2005 6:10:52 PM [Eastern Standard Time] * SVR:USPTO-EFXRF-1/0 * DNIS:8729306 ' CSID:408 971 4660 * DURATION (mm-ss): 05-32- 



D 



Jan 28 05 03:19p SVIPG 



408 971 4GG0 



p. 12 



-9- 

(New) The method as recited in claim 42, wherein the disabling and enabling 
of the storage and the scanning module provides increased functionality in 
conditionally precluding transmission of the data to the storage from the 
central processing unit. 
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